>> TAG: #0day

Zoho ManageEngine ServiceDesk Plus < 10.5 – Improper Access Restrictions

BlueStacks 4.80.0.1060 – Denial of Service (PoC)

TapinRadio 2.11.6 – ‘Uername’ Denial of Service (PoC)

Horde Webmail 5.2.22 – Multiple Vulnerabilities

Microsoft Windows (x84/x64) – ‘Error Reporting’ Discretionary Access Control List / Local Privilege Escalation

Microsoft Windows (x84) – Task Scheduler’ .job’ Import Arbitrary Discretionary Access Control List Write / Local Privilege Escalation

Microsoft Internet Explorer 11 – Sandbox Escape

Moodle Jmol Filter 6.1 – Directory Traversal / Cross-Site Scripting

WordPress Plugin WPGraphQL 0.2.3 – Multiple Vulnerabilities

Oracle CTI Web Service – ‘EBS_ASSET_HISTORY_OPERATIONS’ XML Entity Injection